Your keys, examined
Back issues
22 articles to date · page 2 of 3
Reviews Hot Wallets Security DeFi
Two browser wallets that are not MetaMask, judged only on the seconds before you sign. One publishes its whole extension under MIT. The other bought the security team it was already using. What each vendor's own documents will and will not support.
Continue reading: Rabby against Phantom: who is reading the transaction before you sign it
Trezor aimed to have its Anonymous Delivery option live in the EU by September 2026. The company's own incident page still lists it as coming soon — and here is the narrow threat it would actually defend against.
Continue reading: Trezor's Anonymous Delivery, and the September date it set itself
Reviews Bitcoin Lightning Self-custody
One wallet is winding down its custodial product and calling the replacement self-custodial. The other hands you twelve words and no second chance. What each one asks you to trust, in the vendors' own documents.
Continue reading: Wallet of Satoshi against Phoenix: what "self-custody" is doing in that sentence
News Ledger Security Hardware Wallets
Ledger published LSB 023, 024 and 025 on 27 August. The one with the widest reach sits in the Secure SDK rather than in any single app, and none of the three is repaired by updating device firmware.
Continue reading: Three Ledger bulletins, and the fix is an app update
Reviews Hardware Wallets Trezor Coldcard
One device answers the trust question with auditable silicon and a colour touchscreen; the other signs Bitcoin only, behind an air gap, after a summer that broke its own seed generator. What each defends, and against whom.
Continue reading: Trezor Safe 7 against Coldcard Q: where your seed comes from
News Security Hardware Wallets Self-custody
Thousands of hardware wallet buyers had names, home addresses, phone numbers and emails taken in separate breaches at shipping partners, per TechCrunch. No key was touched, and the threat model changed anyway.
Continue reading: Trezor and SafePal data breaches happened at the courier
Reviews Ai Agents MetaMask Ledger
Two answers to the same 2026 problem — an AI agent that has to transact without being handed the keys. One enforces policy in software, the other puts a physical confirmation in the path. What each actually defends against.
Continue reading: Agent wallets, assessed: MetaMask's rules against Ledger's button
A peer-reviewed USENIX Security '26 paper reports that over 63% of EIP-7702 authorisation transactions are associated with malicious attacks on the accounts that signed them. What a delegation is, and why signing one is not the same as approving a token.
Continue reading: Most early wallet delegations pointed at attackers
Reviews MetaMask Hot Wallets DeFi
The default door into Ethereum is a hot wallet, and a hot wallet is a decision about risk. The threat model, the approvals hygiene, and where MetaMask earns its keep.
The FCA has confirmed a late-2026 consultation on DeFi, alongside updates to its financial-crime guidance. Interfaces, front-ends, and wallet software should read the calendar.
© 2026 Wallet Post. All rights reserved.
Paid posts are labelled “Sponsored” and carry a disclosure with the post.
Crypto assets are high risk. Nothing on this site is financial advice. Self-custody means self-responsibility.